I run a few services that require ports to be open. Everything that can go behind a reverse proxy does so. But there’s some that can’t and that’s OK.